Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 05:55:12.578 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 05:55:14.093 00:05:01.008 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 05:55:13.449 00:05:00.664 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 05:59:43.547 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:38650 10 6452 1 2025-08-15 05:56:14.135 00:05:00.948 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 05:55:14.155 00:06:00.049 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 05:55:14.094 00:06:00.130 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:00:54.330 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:38670 1 40 1 2025-08-15 05:56:14.157 00:06:00.017 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 05:57:52.191 00:05:10.003 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2732 1 2025-08-15 05:57:14.094 00:06:00.085 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:02:55.157 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:32836 1 40 1 2025-08-15 05:59:13.471 00:05:00.624 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:03:19.686 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:03:19.839 00:00:00.027 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:03:19.899 00:00:00.027 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:03:55.563 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49192 1 40 1 2025-08-15 06:04:45.599 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:43848 10 6452 1 2025-08-15 06:01:12.580 00:05:01.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:01:14.094 00:05:01.009 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:01:13.453 00:05:00.664 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:02:14.134 00:05:00.948 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:06:56.770 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:42700 1 40 1 2025-08-15 06:02:14.154 00:06:00.048 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:02:14.094 00:06:00.128 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:03:12.195 00:05:10.010 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2724 1 2025-08-15 06:07:46.814 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38342 10 6452 1 2025-08-15 06:03:14.159 00:06:00.017 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:08:19.677 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:08:19.968 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:08:19.617 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:08:47.220 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39692 9 6412 1 2025-08-15 06:04:14.095 00:06:00.084 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:05:13.471 00:05:00.625 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:10:48.036 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:45846 10 6452 1 2025-08-15 06:07:13.453 00:05:00.666 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:07:12.580 00:05:01.518 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:07:14.095 00:05:01.010 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:08:14.137 00:05:00.949 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:08:32.206 00:05:10.005 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2852 1 2025-08-15 06:12:48.842 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:59376 9 6412 1 2025-08-15 06:13:19.843 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:13:20.138 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:13:20.199 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:13:59.620 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:57528 1 40 1 2025-08-15 06:09:14.156 00:06:00.048 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:09:14.096 00:06:00.128 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:15:00.029 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:49834 1 40 1 2025-08-15 06:11:13.474 00:05:00.623 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:10:14.159 00:06:00.018 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:16:00.406 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:35950 1 40 1 2025-08-15 06:11:14.095 00:06:00.085 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:16:50.446 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:39806 9 6412 1 2025-08-15 06:13:12.581 00:05:01.516 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:13:14.096 00:05:01.012 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:13:13.454 00:05:00.663 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:13:52.210 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2744 1 2025-08-15 06:17:50.807 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:52600 9 6412 1 2025-08-15 06:14:14.137 00:05:00.951 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:18:19.876 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:18:20.098 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:18:20.158 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:19:51.613 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:38818 9 6412 1 2025-08-15 06:16:14.097 00:06:00.128 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:17:13.477 00:05:00.621 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:16:14.157 00:06:00.047 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:17:14.162 00:06:00.017 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:19:12.583 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:18:14.098 00:06:00.085 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:19:14.098 00:05:01.018 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:19:13.457 00:05:00.661 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:23:19.981 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:23:20.326 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:23:20.386 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:19:12.223 00:05:10.012 OSPF 23.0.4.1:0 -> 224.0.0.5:0 39 2744 1 2025-08-15 06:23:53.212 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40740 10 6452 1 2025-08-15 06:20:14.137 00:05:00.958 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:24:53.613 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:53952 10 6452 1 2025-08-15 06:27:04.744 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:46708 1 40 1 2025-08-15 06:23:13.479 00:05:00.620 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:23:14.158 00:06:00.047 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:23:14.098 00:06:00.127 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:28:20.221 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:28:20.378 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:28:20.437 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:24:32.235 00:05:10.015 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2528 1 2025-08-15 06:28:55.215 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:53678 9 6412 1 2025-08-15 06:25:12.583 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:25:14.097 00:05:01.020 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:25:13.460 00:05:00.659 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:24:14.163 00:06:00.016 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:26:14.138 00:05:00.959 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:25:14.098 00:06:00.085 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:30:56.020 00:00:10.362 TCP 1.101.0.1:3000 -> 23.104.0.1:37646 10 6452 1 2025-08-15 06:31:56.421 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40690 9 6412 1 2025-08-15 06:32:56.823 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:60660 9 6412 1 2025-08-15 06:33:20.562 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:29:13.482 00:05:00.618 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:33:20.487 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:33:20.503 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:29:52.251 00:05:10.014 OSPF 23.0.4.1:0 -> 224.0.0.5:0 37 2800 1 2025-08-15 06:33:57.228 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:38154 10 6452 1 2025-08-15 06:31:12.585 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:30:14.099 00:06:00.128 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:31:14.099 00:05:01.020 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:31:13.461 00:05:00.659 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:30:14.159 00:06:00.048 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:35:57.998 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:40272 9 6412 1 2025-08-15 06:31:14.164 00:06:00.017 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:32:14.140 00:05:00.962 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:32:14.099 00:06:00.087 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:37:58.806 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:51322 9 6412 1 2025-08-15 06:38:20.718 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:38:20.702 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:38:20.763 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:38:59.206 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35732 9 6412 1 2025-08-15 06:35:13.483 00:05:00.617 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:35:12.263 00:05:10.004 OSPF 23.0.4.1:0 -> 224.0.0.5:0 38 2772 1 2025-08-15 06:37:12.585 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:37:14.100 00:05:01.024 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:37:13.462 00:05:00.658 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:42:10.777 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:40468 1 40 1 2025-08-15 06:37:14.161 00:06:00.048 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:38:14.141 00:05:00.962 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:37:14.100 00:06:00.128 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:43:00.820 00:00:10.977 TCP 1.101.0.1:3000 -> 23.104.0.1:51150 9 6412 1 2025-08-15 06:38:14.166 00:06:00.014 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:43:20.726 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:43:20.666 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:43:20.667 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:44:12.196 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37996 1 40 1 2025-08-15 06:39:14.100 00:06:00.088 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:40:32.267 00:05:10.008 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2872 1 2025-08-15 06:45:02.234 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:52974 10 6452 1 2025-08-15 06:41:13.482 00:05:00.620 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:46:12.964 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:47548 1 40 1 2025-08-15 06:43:12.587 00:05:01.515 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:43:14.100 00:05:01.022 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:43:13.463 00:05:00.659 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:48:03.368 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:45402 10 6452 1 2025-08-15 06:48:20.524 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:48:20.702 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:44:14.141 00:05:00.962 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:48:20.762 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:44:14.161 00:06:00.049 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:44:14.102 00:06:00.129 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:49:14.160 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:37242 1 40 1 2025-08-15 06:45:52.276 00:05:10.009 OSPF 23.0.4.1:0 -> 224.0.0.5:0 41 2888 1 2025-08-15 06:45:14.167 00:06:00.015 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:46:14.103 00:06:00.087 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:47:13.487 00:05:00.616 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:52:05.076 00:00:10.377 TCP 1.101.0.1:3000 -> 23.104.0.1:46230 10 6452 1 2025-08-15 06:49:12.589 00:05:01.514 TCP 23.155.0.1:42089 -> 23.154.0.1:179 12 738 1 2025-08-15 06:49:14.102 00:05:01.021 TCP 23.155.0.1:37249 -> 23.153.0.1:179 12 738 1 2025-08-15 06:53:15.827 00:00:00.000 TCP 1.101.0.1:3000 -> 23.104.0.1:54274 1 40 1 2025-08-15 06:49:13.467 00:05:00.656 TCP 23.151.0.1:42035 -> 23.155.0.1:179 12 738 1 2025-08-15 06:53:20.941 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:53:20.833 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:53:20.880 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:50:14.143 00:05:00.961 TCP 23.153.0.1:179 -> 23.155.0.1:37249 12 738 1 2025-08-15 06:54:05.861 00:00:10.387 TCP 1.101.0.1:3000 -> 23.104.0.1:33492 10 6452 1 2025-08-15 06:55:06.297 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35394 10 6452 1 2025-08-15 06:51:12.286 00:05:10.413 OSPF 23.0.4.1:0 -> 224.0.0.5:0 33 2240 1 2025-08-15 06:51:14.163 00:06:00.049 TCP 23.157.0.1:40165 -> 23.155.0.1:179 14 861 1 2025-08-15 06:51:14.104 00:06:00.129 TCP 23.155.0.1:179 -> 23.157.0.1:40165 14 861 1 2025-08-15 06:57:07.060 00:00:10.725 TCP 1.101.0.1:3000 -> 23.104.0.1:33990 10 6452 1 2025-08-15 06:53:13.490 00:05:00.614 TCP 23.155.0.1:179 -> 23.151.0.1:42035 12 738 1 2025-08-15 06:52:14.170 00:06:00.014 TCP 23.158.0.1:40787 -> 23.155.0.1:179 14 861 1 2025-08-15 06:53:14.103 00:06:00.087 TCP 23.155.0.1:179 -> 23.158.0.1:40787 14 861 1 2025-08-15 06:58:07.824 00:00:10.541 TCP 1.101.0.1:3000 -> 23.104.0.1:38080 9 6412 1 2025-08-15 06:58:21.011 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-08-15 06:58:20.920 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-08-15 06:58:20.950 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 Summary: total flows: 173, total bytes: 281068, total packets: 1902, avg bps: 585, avg pps: 0, avg bpp: 147 Time window: 2025-08-15 05:55:12 - 2025-08-15 06:59:14 Total flows processed: 173, passed: 173, Blocks skipped: 0, Bytes read: 18056 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 76784.6 Runtime: 0.0023s